deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-06-18 11:53:37 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

Merge branch 'master' of https://github.com/MicrosoftDocs/windows-docs-pr into FromPrivateRepo

Browse Source
This commit is contained in:
huaping yu
2019-06-27 10:43:18 -07:00
parent eae63c5df2 ae1531ae1b
commit 399f85c0fa
44 changed files with 734 additions and 323 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
devices/surface-hub/TOC.md
View File

@ -12,7 +12,7 @@
#### [Site planning for Surface Hub 2S](surface-hub-2s-site-planning.md)
#### [Surface Hub 2S quick start](surface-hub-2s-quick-start.md)
#### [Install and mount Surface Hub 2S](surface-hub-2s-install-mount.md)
#### [Customizing installation of Surface Hub 2S](surface-hub-2s-custom-install.md)
#### [Customize wall mount of Surface Hub 2S](surface-hub-2s-custom-install.md)
#### [Setup worksheet](setup-worksheet-surface-hub.md)
#### [Surface Hub 2S ports and keypad overview](surface-hub-2s-port-keypad-overview.md)
#### [Connect devices to Surface Hub 2S](surface-hub-2s-connect.md)

6
devices/surface-hub/differences-between-surface-hub-and-windows-10-enterprise.md
View File

@ -127,13 +127,13 @@ The administrative features in Windows 10 Enterprise, such as the Microsoft Mana
### Remote management and monitoring
Surface Hub supports remote management through mobile device management (MDM), and monitoring through Operations Management Suite (OMS).
Surface Hub supports remote management through mobile device management (MDM) solutions such as [Microsoft Intune](https://docs.microsoft.com/en-us/intune/) and monitoring through [Azure Monitor](https://azure.microsoft.com/services/monitor/).
*Organization policies that this may affect:* <br> Surface Hub doesn't support installing Win32 agents required by most traditional PC management and monitoring tools, such as System Center Operations Manager.
### Group policy
### Group Policy
Surface Hub does not support group policy, including auditing. Instead, use MDM to apply policies to your Surface Hub. For more information about MDM, see [Manage settings with an MDM provider](manage-settings-with-mdm-for-surface-hub.md).
Surface Hub does not support Windows Group Policy, including auditing. Instead, use MDM to apply policies to your Surface Hub. For more information about MDM, see [Manage settings with an MDM provider](manage-settings-with-mdm-for-surface-hub.md).
*Organization policies that this may affect:* <br> Use MDM to manage Surface Hub rather than group policy.

2
devices/surface-hub/surface-hub-2s-custom-install.md
View File

@ -79,7 +79,7 @@ Important considerations for mounting systems
## Mounting methods compatible with Surface Hub 2S
Rail mounts typically have multiple holes and a set of slots, enabling compatibility across a wide range of displays. A rail attached to the wall and two mounts attached to the display enable you to securely install Surface Hub 2S to a wall. When evaluating rail mounts for compatibility, ensure they meet versatility requirements listed earlier.
Surface Hub 2S is compatible with mounts that allow you to place it at angles of 10-70 degrees from the vertical plane. Rail mounts typically have multiple holes and a set of slots, enabling compatibility across a wide range of displays. A rail attached to the wall and two mounts attached to the display enable you to securely install Surface Hub 2S to a wall. When evaluating rail mounts for compatibility, ensure they meet versatility requirements listed earlier.
![*Figure 6. Rail mounts*](images/h2gen-railmount.png)<br>
***Figure 6. Surface Hub 2S rail mounts***

2
devices/surface-hub/surface-hub-2s-install-mount.md
View File

@ -22,7 +22,7 @@ For more information, see [Officially licensed third-party accessories](http://l
![Surface Hub 2S on Roam Mobile Stand](images/sh2-mobile-stand.png)<br>
If you’re not using licensed accessories, see [Customizing installation of Surface Hub 2S](surface-hub-2s-connect.md).
If you’re not using licensed accessories, see [Customize wall mount of Surface Hub 2S](surface-hub-2s-custom-install.md).
| 1. **Set up your mount first** | |
|:------ |:-------- |

15
devices/surface-hub/surface-hub-2s-phone-authenticate.md
View File

@ -1,6 +1,6 @@
---
title: "Configure Easy Authentication for Surface Hub 2S"
description: "Learn how to simplify signing in to Surface Hub 2S using Easy Authentication on your mobile device."
title: "Configure password-less phone sign-in for Surface Hub 2S"
description: "Learn how to simplify signing in to Surface Hub 2S using password-less phone sign-in on your mobile device."
keywords: separate values with commas
ms.prod: surface-hub
ms.sitesec: library
@ -12,14 +12,14 @@ ms.date: 06/20/2019
ms.localizationpriority: Normal
---
# Configure Easy Authentication for Surface Hub 2S
# Configure password-less phone sign-in for Surface Hub 2S
Easy Authentication simplifies signing-in to your meetings and files on Surface Hub 2S.
Password-less phone sign-in simplifies signing-in to your meetings and files on Surface Hub 2S.
> [!NOTE]
> Easy Authentication requires that your primary email address must match your UPN.
> Password-less phone sign-in requires that your primary email address must match your UPN.
## To set up Easy Authentication
## To set up password-less phone sign-in
1. Download the [Microsoft Authenticator](https://www.microsoft.com/en-us/account/authenticator) app for iPhone or Android to your phone.
2. From your PC, go to [https://aka.ms/MFASetup](https://aka.ms/MFASetup) , sign in with your account, and select **Next.**
@ -37,3 +37,6 @@ Easy Authentication simplifies signing-in to your meetings and files on Surface
1. On Surface Hub, sign into **My meetings and files** and select **Send notification** when prompted.
2. Match the number displayed on your phone with the number displayed on Surface Hub to approve your sign-in request.
3. If prompted, enter the PIN or biometric ID on your phone to complete sign-in.
## Learn more
For more information, see [Password-less phone sign-in with the Microsoft Authenticator app](https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-authentication-phone-sign-in).

2
devices/surface-hub/surface-hub-2s-port-keypad-overview.md
View File

@ -28,7 +28,7 @@ The figure below shows the location of ports and physical buttons on a keypad at
|**Key**|**Component**|**Description**|**Key parameters**|
|:--- |:--------- |:----------- |:-------------- |
| 1 | **USB C** | **USB 3.1 Gen 1** <br> Use as a walk-up port for plugging in peripherals such as thumb-drives. Guest ports are on each side of the device (4).<br> <br> *NOTE: This is the recommended port for connecting an external camera. Additional camera mount features are incorporated into the design to help support retention of attached cameras.*<br> <br> NOTE: TouchBack and video ingest are not supported on these ports. | Type C <br> <br> 15 W Port (5V/3A) |
| 2 | **AC power** | **100-240 V input** <br> Connect to standard AC power and Surface Hub 2S will auto switch to the local power standard such as110 volts in the US and Canada or 220 volts in the UK. <br> <br> *NOTE: When the AC cord is plugged in, the system remains in an off state in which only the system management controller (SMC), real-time clock (RTC), and keypad are running.* | IEC 60320 C14 |
| 2 | **AC power** | **100-240 V input** <br> Connect to standard AC power and Surface Hub 2S will auto switch to the local power standard such as110 volts in the US and Canada or 220 volts in the UK. | IEC 60320 C14 |
| 3 | **DC power** | **24V DC input port** <br> Use for connecting to mobile battery. | Xbox1 Dual barrel to Anderson connector |
| 4 | **Ethernet** | **1000/100/10 Base-T** <br> Use for providing a continuous connection in a corporate environment and related scenarios requiring maximum stability or capacity. | RJ45 |
| 5 | **USB-A** | **USB 3.1 Gen 1** <br> Use as a walk-up port for plugging in peripherals such as thumb-drives. | Type A<br>7.5 W Port (5V/1.5A) |

8
devices/surface-hub/surface-hub-2s-prepare-environment.md
View File

@ -25,7 +25,7 @@ Microsoft regularly updates the Office 365 service with new features and functio
## Device affiliation
Use Device affiliation to manage user access to the Settings app on Surface Hub 2S.
With the Windows 10 Team Edition operating system — that runs on Surface Hub 2S — only authorized users can adjust settings via the settings app. Since choosing the affiliation can impact feature availability, plan appropriately to ensure that users can access features as intended.
With the Windows 10 Team Edition operating system — that runs on Surface Hub 2S — only authorized users can adjust settings via the Settings app. Since choosing the affiliation can impact feature availability, plan appropriately to ensure that users can access features as intended.
> [!NOTE]
> You can only set Device affiliation during the initial out-of-box experience (OOBE) setup. If you need to reset Device affiliation, you’ll have to repeat OOBE setup.
@ -36,14 +36,14 @@ No affiliation is like having Surface Hub 2S in a workgroup with a different loc
## Active Directory Domain Services
If you affiliate Surface Hub 2S with on-premises Active Directory Domain Services, you need to manage access to the Settings app via a security group on your domain, ensuring that all SG members have permissions to change settings on Surface Hub 2S. Note also the following:
If you affiliate Surface Hub 2S with on-premises Active Directory Domain Services, you need to manage access to the Settings app via a security group on your domain, ensuring that all security group members have permissions to change settings on Surface Hub 2S. Note also the following:
- When Surface Hub 2S affiliates with your on-premises Active Directory Domain Services, the Bitlocker key is saved in the AD Schema.
- When Surface Hub 2S affiliates with your on-premises Active Directory Domain Services, the Bitlocker key can be saved in the AD Schema. For more information, see [Prepare your organization for BitLocker: Planning and policies](https://docs.microsoft.com/windows/security/information-protection/bitlocker/prepare-your-organization-for-bitlocker-planning-and-policies).
- Your organization’s Trusted Root CAs are pushed to the same container in Surface Hub 2S, which means you don’t need to import them using a provisioning package.
- You can still enroll the device with Intune to centrally manage settings on your Surface Hub 2S.
## Azure Active Directory
When choosing to affiliate your Surface Hub 2S with Azure AD, any user in the Global Admins Security Group can sign in to the Settings app on Surface Hub 2S. Currently, no other group can be delegated to sign in to the Settings app on Surface Hub 2S.
When choosing to affiliate your Surface Hub 2S with Azure AD, any user in the Global Admins Security Group can sign in to the Settings app on Surface Hub 2S. Alternatively, you can configure the Device Administrator role to sign in to the Settings app. For more information, see [Administrator role permissions in Azure Active Directory](https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/directory-assign-admin-roles#device-administrators). Currently, no other group can be delegated to sign in to the Settings app on Surface Hub 2S.
If you enabled Intune Automatic Enrollment for your organization, Surface Hub 2S will automatically enroll itself with Intune. The device’s Bitlocker key is automatically saved in Azure AD. When affiliating Surface Hub 2S with Azure AD, single sign-on and Easy Authentication will not work.